Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
File: UlG0CzMZisWh7fUP_whigWAzXf0.mft (raw, json)
Hash identifier: VI2hEfhAt6rsOsmlfueOBN/XpP8CD51ER+HoqmKguRo=
Subject key identifier: 30:A8:FF:63:FF:39:52:C1:BC:88:68:49:28:15:0B:4B:D4:C5:D2:A6
Authority key identifier: 52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
Certificate issuer: /CN=5251b40b33198ac5a1edf50fff08628160335dfd
Certificate serial: 01A10737AB48E7B296AA7DC00939CD8531C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
Manifest number: 1987
Signing time: Sun 04 Oct 2026 14:00:51 +0000
Manifest this update: Sun 04 Oct 2026 14:00:51 +0000
Manifest next update: Mon 05 Oct 2026 14:00:51 +0000
Files and hashes: 1: 1nMpDLYuPfBQOmpt5pYO3-mYgaM.roa (hash: qFQcqHmma1oo39YlL2XWPJ/NbS5gxpG0P6PjvZW9cyM=)
2: UlG0CzMZisWh7fUP_whigWAzXf0.crl (hash: vDieA3EKpx6czKX15c5eOlACo3CPD9788b23dIoC/Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:37:ab:48:e7:b2:96:aa:7d:c0:09:39:cd:85:31:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5251b40b33198ac5a1edf50fff08628160335dfd
Validity
Not Before: Oct 4 14:00:51 2026 GMT
Not After : Oct 5 14:00:51 2026 GMT
Subject: CN=30a8ff63ff3952c1bc88684928150b4bd4c5d2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:98:ef:fb:df:ed:0a:d0:35:81:b5:cf:0a:
e6:82:b9:d1:b9:01:f9:da:bf:d2:d2:76:4d:82:90:
a3:38:bc:49:53:4d:89:a9:39:9a:44:fe:b1:fc:ec:
1d:66:17:6c:b1:08:57:50:4f:09:5f:2b:1f:3c:3b:
03:a0:0f:22:e5:0d:43:c7:3c:ba:0d:a4:9c:fa:0b:
1a:7f:9b:4b:cd:c6:e1:ba:cc:83:7f:ff:e7:3b:af:
49:73:bb:45:aa:87:a8:8a:fe:38:1a:2c:5b:7d:37:
da:35:5b:0b:3f:96:56:69:10:df:fe:77:f7:b2:ea:
51:ca:76:9d:a4:c5:a7:c3:8b:1c:f5:cc:54:15:1e:
c2:5a:24:44:80:52:56:13:d6:d5:40:41:e9:ad:70:
77:f9:64:0e:6a:d0:11:20:fb:a7:75:3d:70:86:6d:
95:4c:d4:ba:5c:9e:a0:1b:e9:0a:a9:bf:00:79:6f:
82:3f:5b:77:e5:06:54:24:7f:5c:5c:cd:8a:85:1b:
1f:24:bb:dc:5d:27:00:b6:46:a3:7c:ac:53:38:27:
6b:e2:7f:34:cc:3f:fe:35:23:ab:31:b7:10:a3:13:
81:bd:23:f5:58:33:81:fb:b4:80:b1:2d:44:7d:9e:
22:5c:60:91:64:da:d4:2f:cb:3b:a8:3f:de:dc:b9:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:FF:63:FF:39:52:C1:BC:88:68:49:28:15:0B:4B:D4:C5:D2:A6
X509v3 Authority Key Identifier:
keyid:52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ba:78:2d:03:b5:38:77:ba:78:56:06:4a:47:a1:e3:a8:0d:
29:4c:a4:95:46:cf:ac:a3:25:69:b9:97:7c:41:0b:39:31:fb:
65:80:ed:0e:e9:27:d9:27:23:eb:29:2e:a6:db:18:f7:88:2e:
34:8d:f4:a2:a0:35:ba:00:c4:83:f4:71:ab:91:fe:9d:c0:cd:
7b:4e:d6:60:ee:a9:6e:d5:94:d6:3c:58:38:1e:83:c2:bd:60:
df:9c:35:78:38:e2:a2:0c:69:e8:55:c1:7b:5f:80:8c:1a:2f:
76:a4:a9:dd:c0:a3:59:a1:fa:04:96:0f:0b:59:93:f4:30:ca:
dc:d8:91:45:94:77:b9:9b:65:21:84:b3:ba:18:3f:e0:66:69:
4b:23:bf:dd:97:59:9d:aa:e0:8c:a0:fc:c7:52:ab:ce:d8:70:
1a:2d:ef:1f:0e:d7:72:63:53:d2:06:29:97:78:15:1e:55:89:
f5:0e:23:60:08:67:cd:bf:f7:a9:2d:fb:b2:d3:cc:84:28:82:
99:46:b2:77:2e:0e:b7:1c:bc:38:6a:75:70:89:a1:e0:82:8c:
95:a9:78:66:cf:46:f5:c4:a4:9b:9d:12:a3:50:95:ce:95:56:
07:10:9d:42:fe:84:8c:8f:7c:6c:2e:21:eb:18:ba:89:06:ba:
9e:7b:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:04:48 2026 by rpki-client